An MOU/A document primarily documents what?

• A. The terms and conditions for sharing data and information resources in a secure manner.
• B. Data retention schedules.
• C. Roles and responsibilities for routine maintenance.
• D. Incident response procedures.

Answer: (A)

An MOU/A is used to formalize how two or more parties will cooperate, especially around sharing data and information resources. It captures the terms for data exchange, the security controls that must be in place, how access will be granted and managed, data classifications and handling, and the responsibilities of each party. This creates a clear framework so both sides know what is expected and how security is maintained when resources and information are shared. Data retention schedules pertain to how long data is kept and when it’s disposed of, which is separate. Roles for routine maintenance belong in operations or maintenance agreements, and incident response procedures belong in an incident response plan or playbook, not in an MOU focused on data sharing and secure access.